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Abstract. 

We use the periodicity properties of generalized Gauss sums to factor numbers. 
Moreover, we derive rules for finding the factors and illustrate this factorization 
scheme for various examples. This algorithm relies solely on interference and scales 
exponentially. 
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1. Introduction 

"Mathematics is the abstract key that turns the lock of the physical universe." This 
quote by John Polkinghorne expresses in a poetic way the fact that physics uses 
mathematics as a tool to make predictions about physical phenomena such as the motion 
of a particle, the outcome of a measurement, or the time evolution of a quantum state. 
However, there exist situations in which the roles of the two disciplines are interchanged 
and physical phenomena allow us to obtain mathematical quantities. In the present 
series of papers [T] we follow this path of employing nature to evaluate mathematical 
functions. Here, we choose the special example of Gauss sums [2] and show that they are 
ideal for factoring numbers. At the same time we must issue the caveat that in constrast 
to the Shor algorithm [3], the proposed Gauss sum factorization algorithm in its most 
elementary version scales only exponentially since it is based solely on interference and 
does not involve entanglement. However, there exist already indications pt] that a 
combination of entanglement and Gauss sums can lead to a powerful tool to attack 
questions of factorization. 
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The recent years have seen an impressive number of experiments implementing 
Gauss sums in physical systems to factor numbers. These systems range from NMR 
methods [5H7] via cold atoms [8] and Bose-Einstein condensates [HUD], tailored ultra- 
short laser pulses [TT|[T2] to classical light in a multi-path Michelson interferometer 
[l3llTi] . Although these experiments have been motivated by earlier versions of this 
series of papers made available before publication, they have focused exclusively on 
a very special type of Gauss sum, that is the truncated Gauss sum, which is not 
at the center of the present work. Indeed, throughout this series we concentrate on 
three types of Gauss sums: the continuous, the discrete and the reciprocate Gauss 
sum. Moreover, we propose experimental realizations with the help of chirped laser 
pulses [15l[T6] interacting with appropriate atoms. 

We persue in two steps: (i) We first show that the mathematical properties of Gauss 
sums allow us to factor numbers, and (ii) we then present three elementary quantum 
systems to implement our method using chirped laser pulses and multi-level atoms. To 
each step we dedicate an article. There exists a good reason to separate the individual 
articles. The work presented in the two articles is a combination of quantum optics and 
number theory [TTj. In order to avoid overloading the quantum optical aspects of the 
problem with number-theoretical questions we deal with the mathematical properties 
of Gauss sums in the present article and adress the realizations in the second part. 

1.1. Gauss sums in physics 

Gauss sums [HI [19] manifest themselves in many phenomena in physics and come in 
different varieties. They are similar to Fourier sums with the distinct difference that the 
summation index appears in the phase in a quadratic rather than a linear way. 

Real-valued Gaussians are familiar from statistical physics. The integral over a 
finite extension of a Gaussian leads to a higher transcendental, that is the error function. 
When the integration is not along the real axis but along one of the diagonals of complex 
space we arrive at an integral giving rise to the Cornu spiral. This geometrical object 
determines [20J the intensity distribution of light on a screen in the far field of a edge. It 
is also the essential building block of the Feynman path integral [21, 22jand the method 
of stationary phase [23J. 

A modern application of integrals over quadratic phases in physics are chirped 
laser pulses. Here, the frequency of the light increases linearly in time giving rise to a 
quadratic phase. The resulting excitation probability is determined [21] by the complex- 
valued error function which is closely related to the Cornu spiral. Indeed, the Cornu 
spiral was observed in real-time excitation of Rb atoms by chirped pulses [25] . 

A generalization of the Cornu spiral arises when we replace the integration over the 
continuous variable by a summation over a discrete parameter. In this case the Cornu 
spiral turns into a Gauss sum. 

Sums have properties which are dramatically different from their corresponding 
integrals. This feature stands out most clearly in the phenomena of revivals and 
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fractional revivals fZE\ [27]. In the context of the Cornu spiral the transition from the 
integral to the sum leads to the curlicues [281129] , that is Cornu spirals in Cornu spirals. 
The origin of this self-similarity is discreteness. In the Gauss sum the question if a 
parameter takes on integer, rational or irrational values is crucial whereas in the error 
function integral it does not matter. This feature will also be of importance in the 
context of the factorization of numbers which is the topic of the present series of articles. 

Gauss sums are at the very heart of the Talbot effect [30] which describes the 
intensity distribution of the light close to a diffraction grating. They are also crucial 
in the familiar problem of the particle in the box and are the origin of the design of 
quantum carpets [31] and the creation of superpositions of distinct phase states [32] 
by non- linear evolution [33]. Moreover, there is an interesting connection [19] to the 
Riemann zeta function which is determined by the Mellin transform of the Jacobi theta 
function. For complex- valued rational arguments the zeta function leads to Gauss sums. 

1.2. Why factor numbers with Gauss sums? 

It is the exponential increase of the dimension of Hilbert space together with 
entanglement which makes the quantum computer so efficient and ideal for the problem 
of factoring. Two landmark experiments [34|l35] have implemented the Shor algorithm. 
They were based either on Nuclear Magnetic Resonance (NMR) [3lj, or optical |35] 
techniques and were able to factor the number 15. 

Our proposal outlined in this series of articles follows a different approach. It 
aims for an analogue computer that relies solely on interference [36J without using 
entanglement. We test if a given integer i is a factor of the integer N, to be factored. 
Since we have to try out at least \fN such factors the method scales exponentially with 
the number of digits of N. It is therefore a classical algorithm. This fact is not surprising 
since our method does not take advantage of the exponential resources of the Hilbert 
space. 

At the heart of the Shor algorithm is the task of finding the period of a function |37j . 
In our approach we also use properties of a periodic function. It is the periodicity of the 
Gauss sum which allows us to factor numbers. For this purpose we construct a system 
whose output is a Gauss sum. In this sense the system, that is Nature, is performing 
the calculation for us. 

But why are Gauss sums ideal tools for the problem of factorization? Gauss sums 
play an important role in number theory as well as physics. Three examples may testify 
to this claim: (i) The distribution of prime numbers is determined by the non-trivial 
zeros of the Riemann zeta function which is related [19] to the Gauss sums, (ii) a 
quantum algorithm [38TH0] allows to calculate the phase of a Gauss sum efficiently, and 
(iii) the Gauss reciprocity law can be interpreted [JT] as the analogue of the commutation 
relation between position and momentum operators in quantum mechanics. 
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1.3. Various classes of Gauss sums 



In order to lay the ground work for part II of this series we dedicate the present article to 
an overview of the mathematical properties of several Gauss sums which arise in different 
physical systems. When we study the two-photon excitation through an equidistant 
ladder system with a chirped laser pulse we arrive [16] at the sum 

,2' 



w m exp 



2 th 
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(1) 



Here N is expressed in terms of parameters characterizing the harmonic manifold and 
the argument £ is proportional to the rescaled chirp of the laser pulse. The distribution 
of weight factors w m is governed by the shape of the laser pulse. The sum Sn contains 
linear as well as quadratic phases. 

Quite different sums emerge for a one-photon transition in a two-level atom 
interacting with two driving fields. Here we find two different types of Gauss sums 
depending on the temporal shape of the fields. For a sinusoidal modulation of the 
excited state and a weak driving field the corresponding excitation probability amplitude 
is proportional to the sum 



S N (£) ~ 



2ni m 2 - 



N 



(2) 



which depends on purely quadratic phases. 

In the second realization the modulating field causes a linear variation of the excited 
state energy and the one-photon transition is driven by a train of equidistant delta- 
shaped laser pulses. The excitation probability amplitude is proportional to the sum 
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at integer arguments i which is again of the form of a Gauss sum. In comparison to 
Sn(£) now the roles of argument I and the number N to be factored are interchanged. 



l.Jf.. Summary of experimental work 

Several experiments [5TTT4] have already successfully demonstrated factorization with the 
help of Gauss sums. We now briefly summarize them and highlight important features 
in Table [TJ 

The first set of experiments relies on the interaction of a sequence of electromagnetic 
pulses with a two-level quantum system. The phase of each pulse is adjusted such that 
the total excitation probability is determined by a Gauss sum 0112] ■ Two realizations 
of two-level systems have been pursued: in NMR experiments [SHZ] the two levels 
correspond to the two orientations of the spin, for example of the proton of the water 
molecule. However, also optical pumping in laser-cooled atoms creates (8] an effective 
two-level situation, for example of the hyperfine states of rubidium. 

The second type of experiments utilizes a sequence of appropriately designed femto- 
second laser pulses [TT1IT2"] . The intensity at a given frequency component of this light 
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Table 1. Summary of characteristic features of experiments factoring numbers using 
Gauss sums. All experiments are based on the Gauss sum A^(£) defined by @, or 
closely related ones. Here we list the system, the amount of digits of the number N 
to be factored , the number of terms M in the sum and important features associated 
with the specific approach. 



System 



N 
(digits) 



M 



NMR [SHI] 17 10 



cold atoms [8] 6 15 

BEC EHUD] 5 10 

ultra short laser pulses [HJH2] 13 30 

multi-path Michelson interferometer [I3j[l4] 6 3 



higher order 
truncated Gauss sum, 
random terms 
large number of 
pulses 

enhanced visibility 
random terms 
N, I are varied 



is given by the interference of this component of the individual pulses giving rise to a 
sum. With the help of a pulse shaper it is possible to imprint the phases necessary to 
obtain a Gauss sum determining the light intensity at a given frequency. 

The third class of experiments [T3l [T4] is based on a multi-path Michelson 
interferometer [43J. Here the phase shifts accumulated in the individual arms increase 
quadratically with the arm length. This experiment does not suffer from the problem 
[H], that the ratio N/i has to be precalculated. Moreover, they do not only calculate the 
truncated Gauss sum for integer trial factors i but also for rational arguments £ = q/r. 
Gauss sums at rational arguments open up a new avenue towards factorization |35] . 

The experiment reported in Refs. 0,[TO] plays a very special role in this gallery of 
factorization experiments using Gauss sums, (i) It is the only one so far that has used a 
Bose-Einstein condensate (BEC), (ii) the read-out utilizes the momentum distribution, 
and (iii) it relies on a generalization of Gauss sums. Furthermore, they claim a better 
visibility by using the probability distribution for higher momentums. 

All of theses studies have implemented the Gauss sum 

which is closely related to the ones discussed in the present article. Here M + 1 is the 
number of interfering paths which could be the number of laser pulses, or the number 
of arms in the Michelson interferometer. 

With this type of Gauss sum the idea of factorization is straight-forward: When 
i is a factor of N, then N/i is an integer. As a result, the phase of each term in the 
Gauss sum (i) is an integer multiple of 2tt and due to constructive interference the 
value of the sum is unity. For a non-factor i the ratio N/i is a rational number and 
due to the quadratic variation of the phase the individual terms interfere destructively. 
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This feature leads to the unique criterion for distinguishing factors from non-factors: 
For factors the sum Ajff (£) is unity, whereas for non-factors it is not. 

However, a closer analysis [46] reveals the fact that for a subset of test factors, 
which are not factors, the Gauss sum A^\i) takes on values rather close to unity. 
It it therefore difficult to distinguish them from real factors. These test factors have 
been called ghost factors. The amount of ghost factors increases as the number N to be 
factored increases. 

Two techniques to suppress ghost factors offer themselves: (i) a Monte-Carlo 
evaluation [7J[T2] of the complete Gauss sum 

^W-^Eexp^W^), (5) 

and (ii) the use [47] of exponential sums 

aT\z) = £ ex P (- 2W t) ( 6 ) 

with 1 < j. 

Ghost factors originate from the fact that the phase of consecutive terms in a 
Gauss sum such as in (j4]) can increase very slowly. To take terms of A^f randomly 
allows the Gauss sum to interfere destructively rather rapidly. This technique has been 
demonstrated in experiments with femto-second pulses [12] and a 13-digits number could 
be factored with very few pulses. Also a NMR experiment [7] followed this approach 
and factored a 17-digits number consisting of two prime numbers. 

It is interesting to note that the argument for the factorization with Gauss sum 
A^f {£) does not make use of the fact that the phase varies quadratically. It is correct 
for any phase of the form mP , where j is an integer. The advantage of powers larger than 
two is that in this case the cancellation of neighboring terms is faster. This technique 
has been applied successfully in NMR experiments [7] for j = 5 and a 17-digits number 
could be factored. 



1.5. Alternative proposals of Gauss sum factorization 



It is interesting to compare and contrast the Gauss sums and our proposals for factoring 
numbers to other suggestions along these lines. Here, we refer especially to the 
pioneering algorithm outlined in Ref. jlH] based on the Talbot effect. This method 
uses the intensity distribution of light in the near-field of a iV-slit grating. The number 
N to be factored is encoded in the number of slits of period d. For a fixed separation z 
of the screen from the grating we now vary the wavelength A of the light. The factors 
of N emerge for those wavelengths where all maxima of the intensity pattern are equal 



in height. In Appendix | Appendix C| we show that in this case the intensity distribution 
follows from the Gauss sum 



N-l 



n=0 





n n 2 
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where £ = x/d is the scaled position on the screen and I = Xz/d 2 is the dimensionless 
Talbot distance. 

We emphasize that in contrast to the sum defined by (BJ the sum Q given by 
(J7J) contains N rather than M + 1 terms. Moreover, N does not enter into the phase 
factors of Q. 

In Ref . [19] the idea of factorization with a iV-slit interferometer [18] was translated 
into one with a single Mach-Zehnder interferometer. Furthermore, Ref. [H] suggests a 
way to test several trial factors, by connecting several Mach-Zehnder interferometer. 

Another proposal [501453] is based on wave packet dynamics in anharmonic 
potentials giving rise to quadratic phase factors. Here, the factors of an appropriately 
encoded number N can be extracted from the autocorrelation function. This quantity 
is in the form of a Gauss sum and experimentally accessible. 

This approach is closely related to ideas [Ml [55] to use rotor like systems with a 
quadratic energy spectrum for quantum computing. Initially the wave packet is localized 
in space. At the revival time T rev the packet is identical to the initial one. However, it 
is not the revivals but rather the fractional revivals which are interesting in the context 
of factorization. At times t = T rev /N, with N odd, the wave is localized at iV equally 
spaced positions. If N is even, there exist only N/2 such positions. This phenomenon 
can be used to build a K-bit quantum computer [5HI55] with K log 2 N. It can also be 
employed for factorization [56J. For times t = l/N, with N odd, there exist N maxima 
of the probability distribution if iV and I are coprime. But if they share a common 
factor p that is I = p ■ r and N = p ■ q, we can only observe q maxima. 

We conclude our discussion of alternative proposals of Gauss sum factorization by 
briefly mentioning the idea [57] of using two Josephson phase qbits which are coupled 
to a superconducting resonator. Here, the time evolution generates a phase shift of 
<pk — 2irk 2 N/i. With the help of a quantum phase measurement, the Gauss sum can 
be calculated. 

1.6. Overview 

The article is organized as follows. In Sec. [2] we introduce the continuous Gauss sum and 
demonstrate its potential to factor numbers using two examples. Moreover, a remarkable 
scaling relation of this type of Gauss sum allows us to use the realization of the Gauss 
sum for the number iV to obtain information on the factors of another number N'. We 
then turn in Sec. [3] to an investigation of the properties of the continuous Gauss sum 
for integer arguments. This approach connects the Gauss sums central to the present 
article to the standard Gauss sums discussed in the mathematical literature. In this 
way we establish rules how to identify factors of a number using the continuous Gauss 
sum evaluated at integers. We dedicate in Sec. H] to yet another type of Gauss sum and 
connect it to the continuous Gauss sum at integer values. Section [5] summarizes the key 
results which are relevant for part II of this series of articles. 

In order to keep the paper self-contained we have included several appendices. In 



Factorization with Gauss sums: Mathematical background 



8 



Appendix Appendix B we outline the quantum algorithm [38H1U] for evaluating the 
phase of a specific class of Gauss sums. In order to provide a comparison with the ideas 
proposed in the present article, we then in Appendix Appendix C briefly summarize the 
essential ingredients of the approach to factor numbers with a iV-slit interferometer [23] . 
We conclude in Appendix Appendix D by deriving the absolute value of a specific finite 
Gauss sum that is central to the discussion of revivals, and the factorization technique 
based on the continuous Gauss sum and the iV-slit interferometer. 



2. Continuous Gauss sum 



In the present section we study the periodicity properties of the continuous Gauss sum 

oo 
m=— oo 

with respect to the possibility of factoring numbers. Here, A and B denote two real 
numbers and the argument £ assumes real values. The weight factors w m are centered 
around m = and are slowly varying as a function of m. 

We establish three results: (i) when B/A is an integer we can use the continuous 
Gauss sums S to factor numbers, (ii) Maxima of |«S(£; A, B)\ located at an integer £ 
allow us to identify factors, (iii) By an appropriate scale transformation we can factor 
any number iV using the Gauss sum corresponding to another number N' . 

In order to derive this result we first motivate these properties of the Gauss sum 
and then derive a new representation of this Gauss sum. This function allows us to 
choose the parameters appropriate for this technique. Moreover, we show that it is also 
possible to factor even numbers. 



/ m 


m \ 


an U - 









(8) 



2.1. A tool to factor numbers 

We start our analysis of the continuous Gauss sum by considering the special case A = 1 
and B = N, that is 

oo 
m=— oo 

In Figured] we show |Sjv(OI f° r the example N = 33 = 3 • 11 and the Gaussian weight 
factors 

w(m) = \ t — - exp 

of width Am = 10. 

Our main interest is in the behavior of |5jv(0l 2 m the vicinity of candidate prime 
factors £ = £. Indeed, the insets of Figure [D at the bottom bring out most clearly distinct 
maxima at values of £ corresponding to the factors i = 3 and £ = 11. At non-factors 
such as £ = 5 or £ = 13 illustrated by the insets on the top, the continuous Gauss sum 



m 



(9) 
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Figure 1. Factorization of the odd number N = 33 = 3-11 with the help of 
the continuous Gauss sum |5 , 33 (^)| 2 given by ©■ The insets magnify the behavior of 
1 5*33 (01 2 m the immediate neighborhood of test factors. The pronounced maxima at 
the factors 3 and 11 are clearly visible in the insets at the bottom. In contrast, at non- 
factors the signal does not show any peculiarities as exemplified at the top by £ = 5 
and £ = 13. The width of the Gaussian weight function, (f^5|) . is given by Am = 10 
and the summation over m covers 2M + 1 = 81 terms. 



does not show any peculiarities. This example suggests that the continuous Gauss 
sum Sn represents a tool for factorization. 

We now turn to the role of the parameter A in the continuous Gauss sum S. For this 
purpose, we analyze in Figure |2]the function |«S(£; A,B)\ 2 for the example B = 33 and 
different arguments A = 1, 8 and 33/7 in the vicinity of the factor £ = 3 of N = B = 33. 
For the case A = 8 (middle) the distinct maxima at the factor £ = 3 of iV = 33 is 
not visible anymore. On the other hand, for A = 33/7 (bottom) the absolute value 
\S(£;A, B)\ 2 shows the same behavior as Sa^O- ^ s a consequence, the continuous 
Gauss sum «S(£; A, B) allows factorization only if B/A is an integer number. 

Furthermore, Figure [1] displays maxima at non-integer values of £ as well. For 
example, we find that |S , 5 i(£)| shows a maxima at £ = 10.2 as indicated by Figure |3j 
Because £ = 10.2 is a non-integer, it is thus not relevant in the context of factoring the 
number iV = 51. However, by rescaling the argument £ with 

i = i'-c (ii) 
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Figure 2. Role of the parameter A in the method of factoring a number with the help 
of the continuous Gauss sum <S(£; A, B) defined by ((8]). We depict |<S(£; A, 33) | 2 in the 
vicinity of the factor £ = 3 for three different values of A and note that for A = 1 (top) 
and A — 33/7 (bottom) the quantity |iS| 2 shows a distinct maxima at £ = 3. However, 
for A = 8 (middle) it does not display any peculiarities. 

and C = 51/35, we find that this maxima corresponds to the integer number £' = 7. This 
feature is remarkable, because £' = 7 is a factor of N' = 51/(7 = 35. As a consequence, 
the signal |Sjv(0I does not only contain the information about the factors of iV but also 
of other numbers N'. 

This scaling property of the Gauss sums suggests to store a master curve |Stv(£)| 
on a card small enough to be carried in the pocket which can be used to factor any other 
number N' which is of the same order as N. For this reason the scaling property of 
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9 10.2 11 

£ = 10.2 = 7C 



dC 7C 8C* 

Figure 3. Scaling property of the continuous Gauss sum illustrated by the example 
|S l 5i(^)|. The dominant maximum at £ = 10.2 does not correspond to a factor of 
N = 51 because 10.2 is not an integer. However, by rescaling the horizontal axis, that 
is the variable £ with the help of a new unit C we can identify this maximum as the 
factor of a different numbers N'. Indeed, the choice £ = 10.2 = 7C with C = 51/35 
yields the factor 7 of N' = N/C = B/C = 35. The lower axis indicates this new 
scaling. 

the Gauss sum and the associated possibility to factor many numbers has been jokingly 
called [58] "pocket factorizator" . 

In Figure H] we illustrate the working principle of the pocket factorizator for N' = 35 
and N' = 65 starting from the original signal associated with N — 51. Candidate prime 
factors indicated on the left vertical axis are marked by horizontal lines. In order to find 
the adequate scale £' given by ( TTT1) for the number N' we adapt the slope of the tilted 
line appropriate for N'. On the right vertical axis, we depict numbers N' < N and on 
the horizontal axis numbers N < N'. In order to test whether the prime argument I is 
a factor of N' we follow the horizontal line representing I to the intersection with the 
tilted line. The ordinate £ of the intersection point yields the section of the signal which 
has to be analyzed. When the signal displays a maximum at an integer value of £' we 
have found a factor of N' as indicated by magnified insets of the signal. 

2.2. A new representation 

In the preceding section we have shown for specific choices of the parameters A and B 
that the continuous Gauss sum <S(£; A, B) allows us to factor numbers. In the following 
sections, we now verify this property in a rigorous way. 
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5 13 



Figure 4. The working principles of the pocket factorizator illustrated by the 
factorization of the numbers N' — 35 and N' = 65 using the Gauss sum Sn for 
N = 51. On the right vertical axis and the horizontal bottom axis we show the 
numbers N' to be factored in the domains N' < N — 51 and N' > N = 51, 
respectively. In order to factor the number N' using the master signal |5 , 5i(C)| 2 shown 
in the top row, we need to rescale the horizontal axis according to the transformation 
£' = (N' /N) ■ £. We achieve this task nomographically by connecting the left upper 
corner marking the origin of the master signal with the point N' located either on the 
right vertical axis, or the horizontal bottom axis, by a straight line. We illustrate this 
procedure for the numbers N' — 35, N = 51 and N' = 65 by dotted, solid, and dashed 
lines respectively. To test whether the prime argument t is a factor of N' we follow 
the horizontal lines representing the prime numbers marked on the left vertical axis to 
the intersection with the tilted line. The ordinate of the intersection point defines the 
relevant part of the signal. The insets show the magnified signal in the neighborhood 
of the prime factors of N and N'. A maximum of the signal at an integer identifies 
a factor as indicated by the insets for N' = 35 or N = 51 (top), and N' = 65 (bottom). 
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For this purpose, we rewrite the sum, (JS}, in an exact way as to bring out the 
features of S = S(£;A,B) typical for the different domains of £. Here, we concentrate 
on arguments 



r 



(12) 



that are close to a fraction q/r of B. We use a method which has been developed in the 
context of fractional revivals of wave packets [261I27] . 

When we substitute the representation ( fT2l) of £ into the term of the Gauss sum 
which is quadratic in m we find 
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s = 22 Wm exp 

m=— oo 

Next, we recall the representation 

oo r— 1 oo 

E «™ = E E a i 

m=—oo p=0 n=—oo 

of one sum by a sum of sums which yields 
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<S = E E w p+nr exp 
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exp < 27ri 



or 



r-l 



-^-(p + nr) + — (p + nr) 2 



5 = ^^ exp 27ri— p 2 J w p+nr exp < 27ri 

p=0 n=— oo *■ 

Here, we have made use of the identity 
exp [27ris] = 1 

for integer s. 

With the help of the Poisson summation formula 



— (p + nr) H (p + nr) 
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where /(i/) denotes the continuous extension of f n with /(n) = f n for integer values of 
n we arrive at 

r-l 

A 
r 



IT J 



S = exp 27ri-p 2 | j du w(p + 

exp <^ 27ri -^-(p + z/r) + — (p + ur) 2 — mu 
Here, «;(//) denotes the continuous extension of w m with w(m) = w m . 



(19) 
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where we have also interchanged the summations over m and p. 
As a consequence, we can represent A, £?) in the form 

oo 

s&A,B)= wi r) xW(C;AS) 



with the finite Gauss sum [2] 
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and the shape functions 
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2. 3. Location and origin of maxima 



According to (1221) the continuous Gauss sum S in the neighborhood of £ = g £?/r consists 
of a sum the products VVm Zm of the finite Gauss sum Wm and the shape function 
2™ . Its role stands out most clearly for the example of the continuous extension 

w(ji) = 



1 



27rAm 2 



exp 



Am 



(25) 



of the Gaussian weight function w m given by (flDl) . 

In this case we can perform the integral, (124p . and find the complex- valued Gaussian 



xM=Afexp 



(7 



;i + LD5) 



of width 



a\5) 



a 2 (l + D 2 5 2 ) 



and centered around 



B r . 
m = q— + —d. 
A A 

Here, we have introduced the abbreviations 
-oW(0) 



27r 2 Am 2 



(26) 

(27) 
(28) 

(29) 
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for the width at 5 = as well as 

D = *r^£, (30) 
together with the normalization constant 



Vs Vi=hm- (31) 

It is the size of the width o which determines how many terms contribute to the 
sum over m in f )22|) . Indeed, when a < 1, that is, for a narrow Gaussian only the m- value 
closest to rh contributes while for 1 < a, that is for a broad distribution shape function 

(r) 

l> m > of many neighboring m-values have to be added up in order to yield S. In this 
case the fact that Z™ is a complex-valued Gaussian with a quadratic phase variation 
as expressed by the last term in the exponential of (1261) becomes important. 

of the 



Indeed, we recall from Appendix Appendix D that the absolute value 



finite Gauss sum is either constant as a function of m or oscillates between a constant 
and zero depending on r being odd or even. As a result all terms T$ contribute with 
equal weight or not at all. Although the phases of Wm vary rapidly [31] with m 



they cannot compensate the quadratic variation in m of the phase factor governing the 

(r) 

shape function Xm . As a result the sum over several m-values leads to a destructive 
interference and a small value for S. 

Figure [5] illustrates this single-maximum versus destructive interference-of-many- 
terms behavior for the signal |<S5i(£)| 2 depicted in the inset. The dominant maximum 
at £ = (7/35)51 marked by a triangle arises solely from the term l!f 5 \ On the other 
hand, for £ = (7/35)51 + 3/35 several terms Im depicted by filled circles interfere 
destructively leading to a suppression of the signal. 

Hence, the width a of the Gaussian shape function ( )26l) governs the value of 
S. According to the definition ( 12"T|) of o the smallest value of a appears for 5 = 0. 
Provided er ^ 1 a single term in the sum, corresponding to the m-value mf closest 

- (r) 

to m will contribute. In this case the size of the shape function TrJ is governed by 
exp [— [m! — m) 2 /o~q\. Obviously the largest signal arises when m is an integer m since 
then the argument of the Gaussian Iml vanishes. According to the definition ( 1281) of rh 
we find with 5 = for this optimal case the condition 

B . , 

m = q—, (32) 

which for q = 1 yields the condition that B/A must be an integer, otherwise we cannot 
obtain a maximum. 

We conclude by noting that due to the definition ( TT2"j) of £ the condition 5 = for 
a maximum to occur translates into the value 

£ = -B, (33) 
r 

for the location. Hence, maxima of the continuous Gauss sum S appear for integer 
multiples of B/r. However, they only emerge provided a 1 and B/A is an integer. 
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Figure 5. Dominant maxima in, or small values of the continuous Gauss sum |SW(£)I 
identified with the help of the sum (|22l) as originating from a single shape function 

(r) 

Ifh' > or from the destructive interference of several of them illustrated for N = 51. 
The inset shows |<S5i(£)l as a function of £ which displays a clear maximum at £ = 
357/35 = (7/35)51. Here, the deviation 8 vanishes and therefore, only the terml^ 35 -' is 
relevant for the Gauss sum. On the other hand, for £ = 360/51 = (7/35)51 + 3/35 we 
find 5 = 3/35. As a consequence, several shape functions l£ 5 ' interfere destructively 
in the sum (|22[) leading to a significantly reduced signal. 



2.4- Condition for destructive interference 

In the previous section we have identified the decisive role of the width o"o in allowing 
for dominant maxima in S. In particular, we have established the necessary condition 
o"o *C 1 for the occurrence of maxima. We now derive a criterion for the destructive 
interference of many shape functions Im in the sum ( 122|) . 
This property arises from the condition 

l<a(5) = a (l + D 2 8 2 ) 1/2 (34) 

on the width which implies 



-- 1 



< D 8 . (35) 



When we recall the constraint a 2 1 necessary for the occurrence of a maximum 
which implies 1 << 1/o"q we can neglect the term unity in the square and require the 
condition 

\ < D 2 5 2 , (36) 

which is even more general than the inequality ( 1351) . 

With the help of the definitions ( 129|) and (!30|) of a and D we find 

l«8Am 2 (iY. (37) 
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As a consequence, the width Am 2 depends on the minimal value of 5 which we want to 
discriminate from zero. For factoring the number N we estimate the continuous Gauss 
sum at arguments 

i = iC (38) 
with C = B/N. As a consequence, the parameter S from (fl2l) is given by 

5 = £- q -B=4- q -B = tl^L B (39) 
s r N r Nr v ' 

and therefore, \b\ is larger than Bj (Nr) if it is non- vanishing. As a result, the condition 

of ([37]) reduces to 

Am 2 , . 

1 « (4°) 

which is independent of r. 

In summary, if Am is larger than r and N, and Bj A is integer, we can distinguish 
between 5 = and 5^0. In this case, we see peaks if and only if 5 = which will help 
us to factor the number N as demonstrated in the following section. 



2.5. Factorization 

We now show, that the continuous Gauss sum <S(£; A, B) given by (jHJ) and represented 
for a Gaussian weight function w m defined by (fTUj) by a sum of complex- valued Gaussians 
given by ( 122]) offers a tool to factor numbers. Here, we distinguish between odd and even 
numbers to be factored. Needless to say, the last case is not of practical interest since 
we can always extract powers of 2 from an even number. Nevertheless, it is interesting 
from a principle point of view. In particular, it brings out the crucial role of the finite 
Gauss sum in our factorization scheme. 



2.5.1. Odd numbers In the examples discussed in Sec. 12.11 we have found factors by 
searching for maxima at arguments £ which are integer multiples of C, that is £ = £C. 
In Sec l2.3l we have shown that maxima correspond to arguments £ = (q/r)B. As a 
consequence, the identity (jl2l) transforms for maxima at £ = iC into 

£-C=-B. (41) 

r 

When we define the number N to be factored by the units C and B of our system, that 
is iV = B/C, this equation turns into 

i = -N. (42) 
r 

Here, we have to choose the two coprime integers q and r such that i is an integer. 
The condition is only met if r corresponds to a factor of iV and r must be odd for odd 
numbers N. 

As a result we have derived the criterion for the factorization of odd iV suggested 
in Figs{T]|ll If the Gauss sum S exhibits a maximum at the integer argument £ = £ then 
£ corresponds to a prime factor, or a multiple of a factor of N. 
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(r) 

2.5.2. Even numbers So far we have utilized only the shape function X m to factor 
a number. Moreover, the technique is limited to odd numbers. We now show that 
the finite Gauss sum Wm defined by (1231) together with Xm yields information on the 
factors of iV when N is even. 

Even though the condition 5 = would allow for a maximum at the argument £, we 
may still find a vanishing value of the continuous Gauss sum S. This behavior originates 
from the weights Wm which depend critically on the classification of r and q according 
to 

1/r for r odd 




for r even, 
for r even, 

for r even, 
for r even, 



rq/2 even and 
rq/2 even and 

rq/2 odd and 
rq/2 odd and 



m even 
m odd 

m even 
m odd 



(43) 



derived in Appendix Appendix D 



Indeed, the weights W m in the representation ( 1221) of S vanish for specific 
combinations of r and q thus leading to a suppression of the signal at certain integer 
arguments. For even r and even rq/2 the finite Gauss sum Wm vanishes for odd values 
of the summation index m, whereas for even r and odd rq/2 we find that Wm vanishes 
only for even values of m. 

Thus for even N both, maxima and zeros of \S(£; A, B) | at integer arguments £ = £ 
contain information about the factors of N as demonstrated in Figure [6] for the example 
N = 30 = 2 • 3 • 5. Here, we find a vanishing signal for £ = 3 and £ = 5 as indicated 
by the left insets, whereas the signal shows pronounced maxima at £ = 10 = 2 • 5 and 
i = 12 = 3 • 4. Obviously, these features are related to the factors 2, 3 and 5 of iV = 30. 



3. Discrete Gauss sum 



So far we have analyzed the continuous Gauss sum S and the special case Sn in its 
dependence on the argument £, which assumes real numbers. We now restrict to 
integer arguments £ = £ and recall the identity exp (2irim£) = 1. As a consequence, the 
continuous Gauss sum (Ml reduces to 



m 



(44) 



In the present section we show that the restriction to integer arguments allows us to 
derive analytical expressions for Sn{£) in terms of the standard Gauss sum 

6-1 

G{a, b) = J2 ex P ( 2?ri > ( 45 ) 



m=0 



where a and b denote integers. Its periodicity properties provide us with rules how to 
factor numbers based on Sn{£)- 
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o 




Figure 6. Factorization of the even number N = 30 = 2 • 3 • 5 with the help of 
the Gauss sum |S3o(£)| 2 given by®. The insets magnify the behavior of |S , 3o(^)| 2 m 
the immediate neighborhood of an integer. Factors such as 3 and 5 display zeros as 
exemplified by the insets on the left. However, integers containing products of factors 
lead to maxima in |S3o(£)| 2 as shown by the insets on the right for 10 = 2-5 and 
12 = 2 2 • 3. The width of the Gaussian weight function, (|23|). is given by Am = 8. 



3.1. New representation 



For this purpose we first cast Sn(£) into a new form which can be approximated in 
the limit of a broad weight function w m by the standard Gauss sum G. Indeed, the 
representation (fl~4]) of one sum by a sum of sums yields the expression 

N-l 



s n{£) = ^2 exp 



27rim 2 — 
N 



w m+nN . (46) 

m=0 L J n=— oo 

We evaluate the sum over n with the help of the Poisson summation formula fjlSp and 
find 

oo N-l 



s 



27ti f m 2 — + 



m v 



u=—oo m=0 

where we have introduced the Fourier transform 



N N 



w 



W (X) 



d/i w(n) exp (— 27rix/x) 



(47) 



(4* 
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of the continuous extension w(fi) of the weight factors. 

So far the calculation is exact. However, we now make an approximation which 
connects the sum Sn(£) given by (jUJ) to the standard Gauss sum G defined by ( l4"5l) . 
For this purpose we recall that according to the Fourier theorem the product of the 
widths Am and Ax of the weight function w m and its associated Fourier transform w is 
constant. Since w m is very broad the distribution w (x) must be very narrow. Together 
with the fact that the argument of w is u/N with 1 C Af the Fourier theorem allows us 
to restrict the sum over v to the term v = only and we arriv^jlat 

N-i r 00 
S N (t) = J2 ex V 27rim ^ / d ^M- ( 49 ) 

m=0 L 

Due to the normalization, the integral over w(fi) is equal to unity and we obtain the 
approximation 

S N (£) = ^G(£,N) (50) 
for the discrete Gauss sum Sjy(£) in terms of the standard Gauss sum G. 

3.2. Analytical expressions 

We now use the well-known results [21 ITTHT9] for the standard Gauss sum G to 
approximate S^{t). Throughout the section, we assume that N = p-r contains the two 
integer factors p and r. Moreover, we distinguish two cases of the integer argument I. 

3.2.1. No common factor between I and N In this case we can take advantage of the 
relation [19] 

G{a,b) = (l)G(l,b) (51) 

connecting the standard Gauss sum G(a, b) of the arguments a and b with the elementary 
Gauss sum G(l, b) of the arguments a = 1 and b through the Legendre symbol 

■fl if there is an x with b being a divisor of (a — x 2 ) 
= { —1 if there is no such a; . (52) 

if b is a divisor of a 



When we recall [19] the expression 
G(l,6) = 



l + i)Vb 


for 


b G Mo 


Vb 


for 


b e Mi 





for 


b e M 2 


iyb 


for 


b e M 3 



(53) 



for the elementary Gauss sum G(l, b) with the sets 

M k = {r\r = 4s + k and k = 0, . . . , 3} (54) 

| This reduction of the sum to v — stands out most clearly for the case of the Gaussian weight 
function given by (|25|) . 
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consisting of integers r = 4s + k we obtain the approximation 

2 for N e M 



S N (£)\ 2 ^±-{ 1 for NeMi,M 3 (55) 



N 



for NeM 2 



for the absolute value squared of the discrete Gauss sum Sjy(£), provided £ and N do 
not share a factor. 

3.2.2. A common factor between £ and N Next, we turn to the case where the 
argument £ is an integer multiple k of one of the factors of N, that is £ = k p. Now, we 
find from (150j) the identity 

S N (£) = S N (kp) = ^G(kp,rp) (56) 
which with the help of the factorization relation 

G(a,b)=pG(-,~) (57) 



p p / 

of the standard Gauss sum reduces to 



S N {kp) = %=G{k,r) = %=(-) G(l,r). (OS 



N N \r 

In the last step we have also made use of the connection formula (j5ip . 

The explicit expression f )53|) for G(l,b) finally yields the approximation 

{2 for re M 
1 for reMi,M 3 (59) 
for re M 2 

of | Sat | 2 at integer multiples of the factor p. 



3.3. Factorization 

A comparison between the explicit expressions f )55|) and ( 159~j) for \Sn{£)\ 2 indicates a 
method to factor numbers. In order to illustrate this technique we first assume iV to be 
odd. 

In this case iV is either an element of Ai% or A4 3 and we find according to (|55|) 
that |S , tv(^)| 2 is given by 1/N provided the argument £ and the number iV do not share 
a common factor. Since the factors must be both odd, the value of |5V| 2 for £ being a 
multiple of a factor p reads p/N and is enhanced by p. Moreover, the values \Sn(p)\ 2 
at the factors of iV form a line connecting the points {£ = l,|Sjv(l)| 2 = 1/N) and 
(£ = N, |SAr(iV)| 2 = 1). Obviously for prime numbers, there are no points on this line 
except the start and the end point. 

These features are confirmed in Figure [7] where we depict \Sn(£)\ 2 defined by f|44|) 
for the odd number iV = 39 = 3-13 = 9- 4 + 3 which is an element of M3. No factors 
appear for the prime number iV = 41. 
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The situation is slightly more complicated when N is even. Here, the value of 
\Sn(£)\ 2 at non-factors is either zero if N is member of M.2-, or 2/N if N is member of 
M.q. However, at multiples of the factor p the value of \SN(kp)\ 2 can either be 2p/N, 
p/N or zero depending on the other factor r either being a member of .Mo, M.\ and 
A^3, or M. 2) respectively. In this case, there can even be two lines of \Sn\ 2 at factors. 

This feature stands out clearly in the example of iV = 40 = 5 ■ 2 3 = 10 ■ 4 which 
belongs to the set .Mo- As a result, at non-factors we find the values 2/40 = 1/20 as 
shown in Figure [7J At the factor p = 5 the remaining factor r = 40/5 = 8 is an element 
of M. and the corresponding value of \S^\ 2 is 2 • 5/40 = 1/4. Moreover, for the factor 
p = 8 the remaining factor r = 40/8 = 5 belongs to .Mi and therefore yields the value 
8/40 = 1/5. The factor p = 20 leads us to the remaining factor r = 40/20 = 2 which 
belongs to M.2 and creates a vanishing signal. 

We conclude this discussion of factoring numbers using the discrete Gauss sum 
SjvCO by using the example of the number N = 42 = 2- 3- 7= 10-4 + 2 which is 
an element of M.2- As a result all non-factors have a vanishing signal. The factors 
belong to the classes Ai 2 , -M-i or A4 3 . Since the class M. does not appear, the values 
of |Sat(£)| 2 at factors form only a single rather than two lines. 



4. Reciprocate Gauss sum 

In Secsj2] and [3] we have analyzed the potential of two types of Gauss sums for the 
factorization of numbers. Both sums share the property that the number N to be 
factored and the variable, either in its continuous version £, or as the discrete test factor 
£ appear as the ratios ^/N or £/N. In the present section we investigate yet another 
type of Gauss sum which is even more attractive in the context of factorization. Here, 
the roles of the variable and the number N to be factored are interchanged and the sum 

M 



A (M) 



n W = ^X>p(- 2W 7) ( 6 °) 

m=0 



consisting of M + 1 terms emerges. Due to the appearance of the reciprocal of £/N we 
call A^f\l) the reciprocate Gauss sum. 

We emphasize that A^f\i) has been realized in a series of experiments [5T4T4"] 
and used to factor numbers as summarized in SecJH However, the application of 
the extension of Ajf\t) to a continuous variable as a tool for factorization is more 
complicated and has been analyzed in Ref. [45]. For this reason we concentrate in this 
section on integer arguments I. 

The sums Sjy(£) and A^ f \£) are closely connected with each other. We now show 
that the Gauss reciprocity relation [4T1I59] allows us to express A% {£) in terms of the 
standard Gauss sum G. With the help of the exact analytical expressions for G we then 



obtain closed-form expressions for 



and establish rules how to factor numbers. 
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1/1 



iV = 39 



CO 



1/3 



1/13 e 
1/39 9* 



1/1 



iV = 41 



1/41 



1/1 



1/1 



JV = 40 



N = 42 



1/2 



1/4 
1/5 



1/10 




• • • 



1 2 45 8 10 



1/3 



1/7 



1/21 




Figure 7. Factorization of N = 39,40,41 and 42 using the signal |SV(f)| 2 
corresponding to the discrete Gauss sum Sn(£) given by (l4"4"l) . For N £ .Mo such as 
iV = 40 data points corresponding to factors of N arrange themselves on two straight 
lines through the origin. For N £ M.^ exemplified by N = 42 and odd values of N 
such N — 39 the factors of N lie on a single straight line. For completeness we also 
depict the case of the prime number N = 41 with no points on this line except £ — 1 
and £ = 41. The width of the Gaussian wave function (f2l)j) is given by Am = 10 and 
the summation over m covers 2M + 1 = 81 terms. 



4-.1. Gauss reciprocity relation 

In this section we consider the Gauss sum (£) for the special choice M = £— 1 for the 
truncation parameter M, that is we discuss the properties of the complete reciprocate 
Gauss sum 

-l 



m=0 



— 27rim 



(61) 



Here, for each argument I the summation covers i terms. 
The Gauss reciprocity relation [£T||59] 



a-l 

J^exp 

m=0 



2i7rm — 
a 



2b- 1 

' at \ ^ 
26^ 6XP 



m=0 



-2i7rm — 
46 



(62) 



is essential in building the connection between the complete reciprocate Gauss sum of 
(!6T|) . and the standard Gauss sums G(£,N). 
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When we identify a 



A 



(i-i) 

N 



it) 



1 -i 



and b = N we find the alternative representation 

2JV-1 




Y ex p 



m=0 



2ni m 



AN 



At this point it is useful to take advantage of the relation 

AN-l ,- . -| 2N-1 

2rf-^ 



Y ex p 

k=2N 



AN 



2'nim 2 —— 
AN 



(63) 



(64) 



Y exp 

fc=0 

which follows when we introduce the summation index m = k — 2N together with the 
identity exp(2iris£) = 1 for integers s. As a result we find 

2JV-1 

Y ex P 



k=0 

and (1631) reduces to 
or 



27rim 







iV 



1 -u 

2£\2N 



-m/A 



1 AN-l 

E 



exp 



fc=0 



2vrir 



AT 



(65) 



-4AT-1 

£ 

m=0 



exp 



27rim z 



4iV 



-.G(e,4N). 



2 

A comparison with (|50|) finally establishes the connection 



(66) 



(67) 



(68) 



between the complete reciprocate Gauss sum ^(£) and the discrete Gauss sum Sn(£) 
discussed in the preceding section. 



4-2. Analytical expressions 

The connection (|67|) between the complete reciprocate sum A% l \t) and the standard 
Gauss sum G(£, AN) allows us to draw on the results of (|53j) and (1371) to obtain explicit 
expressions for |^4^ -1 ^(£)|. Throughout this section we assume for the sake of simplicity 
that the number N to be factored is odd. In complete analogy to Sec J3.2l we distinguish 
two cases for the argument £. 



4-2.1. No common factor between £ and N With the help of the factorization relation 
(J57D of G we find 

( AG({,N) for £eM 
G(£,AN)=! G(£,AN) for ieM u M 3 (69) 
[ 2G&2N) for £ e M 2 
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which with the connection formula for G(a, b) and G(l, 6).( l5ip . together with the explicit 
result f )53|) for G(l, b) leads us to 

( A^N for £eM 
\G(£,AN)\=< 2^N for £eM h M 3 . (70) 
[ for £eM 2 

Therefore, the reciprocate Gauss sum takes on the value 

% for £eM 



} W\ = \ y/i for £eM u M 3 ( 71 ) 

for fGW 2 



where we have used (jS7|) . 



4-2.2. A common factor between £ and N Here we have £ = ks and iV = rs, which 
leads us with the help of the factorization relation ( 157]) to 

G(Jfes,4rs) = sG(fc,4r). (72) 

Furthermore, we have to analyze if k and four share a common factor, which leads us 
to 

( 4sG(f,r) for k e M 
G(ks,4rs)=l sG(k,ir) for keMt,M 3 . (73) 
[ 2sG(|,2r) for fceM 2 

In the last step, we have again made use of the factorization relation (1571) . 

In the case k G .M2 it can be shown that 2r for each odd number r belongs to the 
class M. 2 . Therefore, we find 

{4sa/t for fc G .Mo 
2s\/27 for jfceA<i,A<3 (74) 
for k G jM 2 

where we have used (15 ip and ( 1531) . Thus we find with ( 1671) the expression 

( ^ k for keM 

\A%~ 1) (£)\ = 1 -L for fc6M^3 ( 75 ) 
[0 for k G M2 
for the absolute value of the Gauss sum. 



4-3. Factorization 

We now take advantage of the results obtained in the preceding section to factor an 
odd number iV with the help of the signal |*4.^ _1 ^(£)|. For arguments £ corresponding 
to factors of N we find the maximal value \A% = 1- However, if £ and N share 

a common factor s, that is £ = ks and N = rs, we obtain \A% 1] \ = yj2jk, ^/TJk or 0. 
Provided £ and N have no factor in common flUD predicts |^SJ _1) | = ^/2/£, y/t/I or 0. 
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Figure 8. Factorization of N — 1911 = 3 • 7 2 • 13 with the help of the signal 
1-^1911 \^)\ originating from the complete reciprocate Gauss sum defined by (|6T|) and 
given explicitly by (|T1 1) and (f75|) . The positions of the factors are indicated by vertical 
lines. For factors the signal displays a maximum with (£)\ = 1- Moreover, it 

vanishes for all arguments I of the class M. 2 . If I and N have no factors in common 
we find |-4^" 1} I = y/2/i, ^/T/I or zero, depending on t either being an element of 
M.Q, M.i and M3, or M2, respectively. The corresponding curves are represented by 
a dashed, a solid or a dashed line, respectively. Data points which are not situated on 
one of these three curves indicate that the corresponding arguments £ carry information 
on the factors of N. For example, I = 12 = 4- 3 shares the factor s — 3 with N = 1911. 
Since k = 4 is an element of M.® we find according to (|75|) the value •v/1/2. 

In Figure[8]we show as an example the signal for the number iV = 1911 = 

3 ■ 7 2 • 13. The three curves (£)\ = y/l/2, and are indicated by a dashed, 

a solid, and a dashed line, respectively. The arguments £ of data points which are not 
situated on one of these curves contain information on the factors of N. 

5. Conclusions and discussion 

In the present article we have analyzed different schemes to factor numbers based 
on three classes of Gauss sums. We have developed analytical criteria for deducing 
the factors of a number iV from a physical signal given by a Gauss sum and have 
demonstrated the suggested schemes by numerical examples. The continuous version 
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of Gauss sum factorization has a remarkable scaling property. As a result, a single 
realization of the Gauss sum for the number N yields information on the factors of 
another number N'. The discrete version of this scheme rests solely on the analysis of 
Gauss sums at integer arguments. The Gauss reciprocity relation allowed us to establish 
the link with yet another type of Gauss sum. Here, the roles of the argument and the 
number to be factored are interchanged. 

Unlike Shor's algorithm, the factorization schemes discussed in the present article do 
not feature a reduction of the computational resources. Nevertheless, we are convinced 
that this approach will open new perspectives on the connection between physics and 
number theory [T9ll52j. In particular, our work is motivated by the search for physical 
systems which reproduce Gauss sums. In this spirit, the results of this article provide 
the mathematical background for part II where we address physical realizations of Gauss 
sums. 
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Appendix B. Quantum algorithm for phase of Gauss sum 

In this appendix we briefly summarize a quantum algorithm [38, 39J proposed by W. 
van Dam and G. Seroussi, which evaluates the phase of a certain class of Gauss sums. 
We compare and contrast these Gauss sums with the ones central to our article. Since 
the algorithm relies heavily on properties of multiplicative characters, we also briefly 
motivate relevant identities. 

Appendix B.l. Gauss sums over rings 

Gauss sums over a finite ring consisting of integers modulo n denoted by Z/nZ read 




x=0 



(B.l) 



where x = x{ x ) is a multiplicative character. 
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The absolute value of G is given by 

\G(Z/nZ, X ,f3)\ = V^ 

provided n is prime. All other cases can be reduced to that one. 
In the present the quadratic Gauss sum 

6-1 

G(a, b, c) = exp 27ri(m- + 



(B.2) 



m=0 



,rr-) 



(B.3) 



plays a central role. However, only for c = 0, gcd(a,5)=l, and b squarefree, which means 
b 7^ n ■ q 2 , we can cast it into the form 



G(a,b,0) 



keZ/bZ 







ka 


G) 


exp 


2m — 
b 



(B.4) 



of a Gauss sums over a finite ring, where (^) denotes the Legendre symbol. Hence, only 
in this case we can perform the algorithm proposed in Ref. [38|l39]. 

Furthermore, we note that for the quadratic Gauss sum G(a, 0, c), it is very easy to 
estimate the phase 7, in contrast to the absolute value, which depends on the greatest 
common divisor of a and c. In Secj2]we use this attribute of quadratic Gauss sums to 
factor numbers. 



Appendix B.2. Outline of algorithm 

In order to bring out most clearly the main principles of this phase-determining 
algorithm [38j|39], we choose the example of a finite ring Z/nZ over a prime n. If 
n is not prime, we have to first find the factors of n and then execute the algorithm 
for each factor of n. With the help of the phases corresponding to each factor, it is 
possible [3EIE9] to estimate the phase of the Gauss sum. 
Moreover, in the next section we establish the relation 

G(Z/nZ, X , 0) = X-\P)G(Z/nZ, X , 1) (B.5) 

which shows that it suffices to find the phase of G(Z/nZ, X , 1) rather than G(Z/nZ, X , 0). 
With the help of Shor's discrete log algorithm [60] the phase 71 of x~ l (P) can be 
calculated in an efficient way. Hence, we are left with the task to find the phase 72 
of G(Z/nZ,x, 1). 

The algorithm proceeds in four steps: First we prepare the superposition state 

|V>) = :^(|0> + |X» (B.6) 



consisting of the state 



|X) = ^i=$>(x)|x>, (B.7) 

and the 'stale' component |0). We emphasize that \ X ) is a superposition of only n — 1 
orthonormalized states \x) since x(0) = as shown in the next section. 
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In the next step we perform a Quantum Fourier Transformation (QFT) 



n-l 



u qft\ x ) = 

of \x), which leads us to 

^qftIx) = 



J^exp 



y=0 



1 



2ni 



xy 



n 



\y) 
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(B.8) 



n— 1 n— 1 



n(n 



y=0 X=0 

With the help of the definition of G, ( IB. II) . we arrive at 

n-l 



2^ 



(B.9) 



^QFTlx) = , / ^ G(Z/nZ, x ,y)\y) 



(B.10) 



2/=0 



which reduces with the identity (IB. 51) to 



In the third step we produce the phase shift 

Up\y) = x 2 {y)\v) 

on the basis states \y) which yields 

G(Z/nZ, X ,l) 



u„u, 



QFT lx) 



■Ix>- 



(B.11) 



(B.12) 



(B.13) 



Here we have used again the definition of G, (IB. II) . 

The 'stale' component |0) is invariant under the phase transformation. As a result 
the transformed superposition state = U p ^Qpxl^) rea ds 



which due to the expression (E2]) for the absolute value of G takes the form 

1 



V2 



(|0)+e^ 2 |x)), 



(B.14) 



(B.15) 



where 72 denotes the phase of G. 

In the fourth and final step we implement, with the help of the initial superposition 
state \if>), ( ]B.6j) and the transformed state ( IB. 151) an algorithm to determine the 
phase 72. 

In Ref. [381139] it is shown, that this algorithm consisting of state preparation, 
Quantum Fourier Transform, creation of phase shift and phase estimation can be 
performed in polylogarithmic time. 
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Appendix B. 3. Properties of multiplicative characters 
In this section we verify the identity 

G(Z/nZ, X , P) = X '\f3)G(Z/nZ, X , 1). (B.16) 

which is crucial to the algorithm discussed in the preceding section. For this purpose we 

first derive some properties of multiplicative characters and then use them to establish 

(EH. 

We start from the identity 

xM = x(x)x(y) ( B -17) 
of the multiplicative character x which for y = 1 yields 

x (x-l)=x(x) = x(x)x(l), (B.18) 

that is 

X (l) = 1. (B.19) 
Likewise, we find from (1B.17|) for y = the relation 

X (x ■ 0) = X (0) = x(x)x(0) (B.20) 
which is only true for arbitrary x provided 

X (0) = 0. (B.21) 
Next, we substitute y = x^ 1 into (1B.17I) and arrive at 

= X {x~) = X(x)x(x~ x ) (B.22) 
x 

which with the help of HB.19[) reduces to 

Xix- 1 ) = X-\x). (B.23) 
As a consequence, we obtain the relation 

X (x/T 1 ) =x(x) X (r 1 ) =x(x) X (Pr 1 ■ (B.24) 

We are now in the position to verify the identity (IB. 16[) . For this purpose we introduce 

the summation index y = j3x in the Gauss sum. OB.lj) . which reads 

n-l 

G(Z/nZ, X,P) = Y, xivP' 1 ) exp bvri ^1 . (B.25) 
^— ( L nJ 

y=o 

Here, we emphasize that the summation has not changed due to the modular structure 
of the domain of arguments x of the Gauss sum. 

With the help of ( IB. 241) and the definition ( IB. II) of G we immediately arrive at 
(|B7T6|) . 
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Appendix C. Factorization with an N-slit interferometer 

In this appendix we summarize the essential ingredients of the pioneering proposal 
[48J by J.F.Clauser and J.P.Dowling to factor odd numbers using a Young N-slit 
interferometer. For a more elementary argument we refer to the appendix of Ref . [61] . 

We operate the interferometer with matter waves whose propagation is governed by 
the Schrodinger equation rather than light waves, whose evolution is described by the 
Maxwell equations. Needlees to say, in the paraxial limit both wave equations agree. 

We first derive an expression for the wave function on a screen located at a distance 
z from an N-slit grating with the period d. Screen and grating are parallel to each other. 
We then cast the Green's function into a form which allows us to derive a criterion for 
the factorization of an odd integer N. Here, we use a property of Gauss sums derived 



in Appendix Appendix D 



Appendix C.l. Wave function on the screen 
For the propagation of the initial wave function 

N-l 

ifj {x)=ip{x,0) = ^2<f)(x-nd) (C.l) 

n=0 

representing an array of N identical wave functions <ft — 0(^) separated by d we start 
from the Huygens integral [21J 

oo 

^x ) t)=M{t) [ dye ia ^-^ 2 My) (C2) 



-oo 



for matter waves. Here we have introduced the abbreviation 



a« ^ £ (C.3) 



together with 



V 17T 

and M denotes the mass of the particle. 

We substitute the initial wave function, ( 1C.1I) . into the Huygens integral, ( 1C.2I) . 
and introduce the new integration variable ( = y/d — n which yields 

oo 

1>(x,t)= J dC@(~-C,O0R), (c.5) 

— oo 

where 

N-l 

©(£, t) = dN(t) e iQ( ' )d2( «- n)2 (C.6) 

n=0 

is the Green's function of the iV-slit problem. 
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When we can treat the motion along the z-axis classically the time t translates into 
the longitudinal position z via the identity 



z 
v-, 



(C.7) 



where v z is the velocity along the z-axis. 

With the help of the de Broglie relation Mv z = filixjX containing the wavelength 
A of the matter wave together with the definition of a, (1C.3j) . we establish the identity 

MV Z 71 

" Yz 



a(t) = a ( — 



v z j 2hz 

and the Green's function, (1C.6p . takes the form 



(C.t 



-N-l 



■ d 2 \ - 
77- > exp 
iXz 

n=0 



' d 2 

i^-n) 2 

zX 



(C.9) 



We conclude by evaluating the Huygens integral, ( 1C.5j) . in an approximate way. 
Whenever is mainly concentrated around y = and narrow compared to the smallest 
length scale of @, we can evaluate © at y = and factor it out of the integral, which 
leads us to 



V z 



©( 



X z 
of v z 



where 



<f>= I dy <j>(y). 



(CIO) 



(G.11) 



Hence, the intensity pattern \ip (x, z/v z ) \ 2 on the screen is mainly determined by the 
Green's function. 



Appendix C.2. Different representation of Green's function 



The factorization property jH] of the N-slit interferometer results from the periodicity 
properties of the Green's function ©, (I0.9[) . In order to verify this claim we now analyze 
the dependence of © on A. 

Of particular importance is the situation when A = ld 2 /z, where I is an integer. In 
this case © given by (1C.9P reduces to 

-JV-l 



© 



n=0 



ivri(e-n) 2 



(C.12) 



It is instructive to decompose the complete square in the phase into the individual 
contributions and cast the sum in the form 



© = e^G 



where 



7T . 2 7T 



r 4 



(C.13) 
(C.14) 
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and 



with 



g = 



In 



— N-1 

n=0 



71 



n 

exp ( 17r ~ 



Since the phase factor 7„ satisfies the periodicity property 
j n+ i = exp (ml) 7 n 



(C.15) 



(C.16) 



(C.17) 



it is useful to represent the number N to be factored as a multiple k of I plus a remainder 
r that is iV = k ■ £ + r. 

Similarly, the summation index n can be decomposed as n = jl + p. This property 
suggests to express the sum over n into a double sum where the sum over j covers the k 
periods of length I and the one over p contains the elements of a single period. In case 
I is not a factor of N, that is when r is non-vanishing, there will be a remainder 1Z due 
to the summation over an incomplete unit cell. Indeed, we arrive at 

■ k-l l-l 



with 



i=o p=0 



r-l 



O J l +P c 



no 



p=0 



-2vri- 



M 



p 



I 



lki+p- 



(C.18) 



(C.19) 



Due to the periodicity property (IC.17P we find Jji+ P = exp [mjl] 7 P and the two 
sums in Q over j and p decouple. As a result Q takes the form 

^£)=W w (£)A fc (£-Z/2)+^(£) 



where we have introduced the abbreviations 

i-i 



W (0 (0 = \/yE ex P 
v 1 P =o 



?ri(p 2 y - 2p 



and 



k-l 



A k (C) = J2^P [-27rijC] - 
i=o 

Moreover, the remainder 7£ reduces to 

K = exp [-2mk^-l/2)]J^J2 



exp 



p=0 



2?ri 



P 4 



(C.20) 



(C.21) 



(C.22) 



(C.23) 



When we compare the sums in and the reminder 1Z given by (IC.21I) and (IC.23I) 
we find that they only differ in their upper limits. Indeed, the summation in extends 
over the period / whereas the one in 1Z only contains r terms. 
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Appendix C. 3. Criterion for factorization 

Since the function = A&(£) is sharply peaked when ( is an integer s, the Green's 
function Q has maxima at positions £ = 1/2 + s. Because N is odd, / must be also odd 
in order to be an factor of N. Hence, the phases interfere constructively at half integers, 
that is at £ = q + 1/2. 

The intensity of the peaks is given by |W^(£ = q + 1/2) | 2 . As shown in Appendix 



Appendix D it is equal to unity independent from q. 

We therefore arrive at the following criterion [48] for finding factors of an odd number 
N: if I is a factor of N, the remainder 1Z vanishes and the diffraction pattern consists 
of spikes at the positions x = (q + l/2)d of identical hight. If I is not a factor of N the 
remainder TZ leads to diffraction patterns, which interfere with these spikes. As a result 
their height is not identical anymore. 



Appendix D. Absolute value of a finite Gauss sum 

In the factorization schemes based on the continuous Gauss sum Sat(0 an d the N-slit 
interferometer discussed in Sec. [2] and Appendix Appendix C, respectively, the relation 



|W«(o ) 6,c)| i 



for the sum 



r-1 



W {r) {a,b,c) = -J^exp 



p=0 



17T 

T 



(p 2 a + 2bp + pc) 



(DA) 



(D.2) 



plays a central role. It is noteworthy that ( ID. II) holds true for any integer a, b and c 
provided a and r are coprime and ar — c even. In the present section we verify (ID. II) . 

For this purpose we first note that VV^ is periodic in b with period r. As a result 
we can expand IVV^I 2 into a Fourier series 

r-1 r , 

y"A (r) (n)exp -2vri 

r 



i — l 

yyM ( a , b,c) 2 = -J2 Air) ( n ) ex P 



n=0 



-2n'\-n 

r 



(D.3) 



with the expansion coefficients 



r-1 



A^ i 



n 



W r \a,b,c) 



exp 



b=0 



2ni-b 
r . 



(D.4) 



In the second step, we substitute the definition (ID. 21) of into this expression for 
Av> (n) and find 



17T 

r 



{j?a — p' 2 a + pc — p'c) 



1 r_1 
A {r \n) = — V exp 

p,p'=0 

Here, all terms containing the variable b are combined in 

r-1 

A ( S ) = 5^ eXP 



6=0 



2ni-b 

r . 



r for s = k ■ r 
else 



A(p-p' + n). (D.5) 



(D.6) 
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Because < p,p',n < r, there are only two possibilities for which A(p — p' + n) is 
non-vanishing: p — p' + n = or p — p' + n = r. In the first case, p must be smaller 
than r — n because p' < r. In the second case p must be larger or equal to r — n because 
< p' . Therefore, the Fourier coefficients given by flD.5j) reduce to 

1 r—n—l 



II 



p=0 



exp 



r-l 



i— (2pna + an 2 + nc) 



exp 



-ni(ar— c) 



-i— (2pna + an 2 + nc) 

p=r— n 

If ar — c is an even number, we can combine these two sums to one sum 

r-l 

!exp 



A<">(„) = i£' 



which yields 



77 



p=0 

1 for 77 = 
else 



77a " 




— 2iri — p 


exp 


r . 





m 2 

— (an + nc) 
r 



(D.7) 



(D.8) 



(D.9) 



In the last step we have used the fact, that a and r are coprime. 

When we now substitute ( 1D.9I) into the Fourier representation (1D.3I) we immediately 
arrive at (ID. II) . 

We conclude by analyzing the finite Gauss sum 



exp 



p=0 



2vri [p 2 1+p—\ 

r r / 



(D.10) 



which is a special case of VV^. Indeed, a comparison between (jlX2l) and flLTTOj) allows 
us to identify the parameters a = 2q, b = m and c = 0. However, the discussion is now 
slightly more complicated. If r is odd it cannot share a divisor with a = 2q and we can 
apply fID.ip . In this case only the Fourier term with 77 = is non- vanishing. On the 
other hand, if r is even, it shares with a = 2q the factor 2 and also the term 



r-l 



A^ r \n = r/2) = -J^ 



exp 



p=0 



-27Tiqp — 17T — 



exp — 17T 



h 



qr 



is non-vanisching. With the help of (1D.3|) we find 



W (r) (2g,m,0) 



1 + exp 



qr 

— 17T I h 777 

2 



(d.ii; 



(D.12) 



can either be zero if qr /2 + m is odd, or 2/r if it is even. 
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